view release on metacpan or  search on metacpan

README.md  view on Meta::CPAN

# NAME

Amon2::Plugin::Web::CSRFDefender - (DEPRECATED) Anti CSRF filter

# SYNOPSIS

    package MyApp::Web;
    use Amon2::Web;

    __PACKAGE__->load_plugin('Web::CSRFDefender');

# DESCRIPTION

**This module is deprecated.** Do not use it in new code.

This plugin denies CSRF request.

Do not use this with [HTTP::Session2](https://metacpan.org/pod/HTTP%3A%3ASession2). Because [HTTP::Session2](https://metacpan.org/pod/HTTP%3A%3ASession2) has XSRF token management function by itself.

# METHODS

- $c->get\_csrf\_defender\_token()

    Get a CSRF defender token. This method is useful to add token for AJAX request.

- $c->validate\_csrf()

    You can validate CSRF token manually.

# PARAMETERS

- no\_validate\_hook

    Do not run validation automatically.

- no\_html\_filter

    Disable HTML rewriting filter. By default, CSRFDefender inserts XSRF token for each form element.

    It's very useful but it hits performance issue if your site is very high traffic.

- csrf\_token\_generator

    You can change the csrf token generation algorithm.

# LICENSE

Copyright (C) Tokuhiro Matsuno.

This library is free software; you can redistribute it and/or modify
it under the same terms as Perl itself.

# AUTHOR

Tokuhiro Matsuno <tokuhirom@gmail.com>

# THANKS TO

Kazuho Oku and mala for security advice.

# SEE ALSO

[Amon2](https://metacpan.org/pod/Amon2)